purchase order[.]exe

General

Target
purchase order.exe
Size 884KB
Sample230428-m591lsfe2s
SHA256 8612a4be1e824a7d1062b9c37210e39cfd3677970b859ca80a46e8a1e7e424d2
MD5 edd063ec583bd3fb9a8e923f929ce71b
SHA1 f0a3a59d33d4adcd1a1c47f68772445b15a5ca1e
SHA512 50f5bd65ced5f2b73b538a862270cc4e71e2a66e73ff58c32bdf774f1eaba99a23e9b7b4b46c24999ab63e18a9cb513f026a33abc401ee623012f7be3bf4bb71
SSDEEP 12288:vwHNDmSFJaK07i9V4ZS3Im4smmMjXegQVt:vw5mcXp6Y3osmm
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
purchase order.exe

File Explorer

purchase order.exe

.exe 884KB

purchase order.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 8612a4be1e824a7d1062b9c37210e39cfd3677970b859ca80a46e8a1e7e424d2
MD5 edd063ec583bd3fb9a8e923f929ce71b
SHA1 f0a3a59d33d4adcd1a1c47f68772445b15a5ca1e
SHA512 50f5bd65ced5f2b73b538a862270cc4e71e2a66e73ff58c32bdf774f1eaba99a23e9b7b4b46c24999ab63e18a9cb513f026a33abc401ee623012f7be3bf4bb71
SSDEEP 12288:vwHNDmSFJaK07i9V4ZS3Im4smmMjXegQVt:vw5mcXp6Y3osmm
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

614098

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing

General

Malware Config

Signatures

File Explorer

purchase order.exe

mscoree